Fail2Ban Ban Triggered

2019-11-06T16:39:44.782755shield sshd\[2691\]: Invalid user ultra from 103.89.124.170 port 46878
2019-11-06T16:39:44.786839shield sshd\[2691\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.89.124.170
2019-11-06T16:39:46.803494shield sshd\[2691\]: Failed password for invalid user ultra from 103.89.124.170 port 46878 ssh2
2019-11-06T16:43:58.719041shield sshd\[3039\]: Invalid user add from 103.89.124.170 port 55292
2019-11-06T16:43:58.723825shield sshd\[3039\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.89.124.170

Telnet Server BruteForce Attack

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/179.95.59.180/ 
 
 BR - 1H : (270)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : BR 
 NAME ASN : ASN18881 
 
 IP : 179.95.59.180 
 
 CIDR : 179.95.32.0/19 
 
 PREFIX COUNT : 938 
 
 UNIQUE IP COUNT : 4233472 
 
 
 ATTACKS DETECTED ASN18881 :  
  1H - 2 
  3H - 3 
  6H - 8 
 12H - 17 
 24H - 47 
 
 DateTime : 2019-11-06 15:39:35 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery

Nov  6 17:43:28 MK-Soft-VM6 sshd[13198]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.232.67.201 
Nov  6 17:43:30 MK-Soft-VM6 sshd[13198]: Failed password for invalid user kuang from 168.232.67.201 port 54180 ssh2
...

Nov  6 06:47:57 eddieflores sshd\[11942\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.ip-149-56-44.net  user=root
Nov  6 06:47:59 eddieflores sshd\[11942\]: Failed password for root from 149.56.44.101 port 50234 ssh2
Nov  6 06:51:41 eddieflores sshd\[12229\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.ip-149-56-44.net  user=root
Nov  6 06:51:43 eddieflores sshd\[12229\]: Failed password for root from 149.56.44.101 port 59780 ssh2
Nov  6 06:55:22 eddieflores sshd\[12582\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.ip-149-56-44.net  user=root

2019-11-06T14:34:59.894959hub.schaetter.us sshd\[9960\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.182.47.132  user=root
2019-11-06T14:35:02.018249hub.schaetter.us sshd\[9960\]: Failed password for root from 180.182.47.132 port 47565 ssh2
2019-11-06T14:39:15.428137hub.schaetter.us sshd\[9997\]: Invalid user postgres from 180.182.47.132 port 38260
2019-11-06T14:39:15.438612hub.schaetter.us sshd\[9997\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.182.47.132
2019-11-06T14:39:17.039900hub.schaetter.us sshd\[9997\]: Failed password for invalid user postgres from 180.182.47.132 port 38260 ssh2
...

Too many connections or unauthorized access detected from Arctic banned ip

Nov  6 06:26:01 php1 sshd\[9959\]: Invalid user abc1234 from 207.107.67.67
Nov  6 06:26:01 php1 sshd\[9959\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.107.67.67
Nov  6 06:26:04 php1 sshd\[9959\]: Failed password for invalid user abc1234 from 207.107.67.67 port 47006 ssh2
Nov  6 06:30:06 php1 sshd\[12217\]: Invalid user nq from 207.107.67.67
Nov  6 06:30:06 php1 sshd\[12217\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.107.67.67

\[2019-11-06 11:40:26\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '81.171.107.179:59539' - Wrong password
\[2019-11-06 11:40:26\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-06T11:40:26.167-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="18045",SessionID="0x7fdf2cbce618",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.107.179/59539",Challenge="750e9e05",ReceivedChallenge="750e9e05",ReceivedHash="82e333248baad78bb26c33a29356e744"
\[2019-11-06 11:41:41\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '81.171.107.179:58845' - Wrong password
\[2019-11-06 11:41:41\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-06T11:41:41.917-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="40972",SessionID="0x7fdf2cbce618",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81

Unauthorized connection attempt from IP address 92.118.38.38 on Port 25(SMTP)

Nov  6 17:36:58 mc1 kernel: \[4344517.076458\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.190 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=31706 PROTO=TCP SPT=43316 DPT=50513 WINDOW=1024 RES=0x00 SYN URGP=0 
Nov  6 17:42:32 mc1 kernel: \[4344850.739203\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.190 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=5279 PROTO=TCP SPT=43316 DPT=51340 WINDOW=1024 RES=0x00 SYN URGP=0 
Nov  6 17:46:43 mc1 kernel: \[4345102.344215\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.190 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=42450 PROTO=TCP SPT=43316 DPT=51138 WINDOW=1024 RES=0x00 SYN URGP=0 
...

ENG,WP GET /wp-login.php
GET /wp-login.php

Connection by 125.64.94.212 on port: 13013 got caught by honeypot at 11/6/2019 3:16:57 PM

Nov  6 18:54:40 sauna sshd[27281]: Failed password for root from 185.246.75.146 port 52192 ssh2
...